$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: J0THWtreOX7IL4zbritspdNONuF2tP8z+aL1DcnRaOw= Subject key identifier: 57:C2:C0:89:52:CB:0A:78:E7:20:DC:5F:6D:71:4D:9F:CE:41:4A:E7 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 0C7D50A566EE833AF2CF790451A697137569E1F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 9C Signing time: Fri 25 Apr 2025 09:00:35 +0000 Manifest this update: Fri 25 Apr 2025 08:55:35 +0000 Manifest next update: Mon 28 Apr 2025 17:01:35 +0000 Files and hashes: 1: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: WMBRTJZFGacOwL0tII1e5OYrLqafnXgUMf8SHMeolBM=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7d:50:a5:66:ee:83:3a:f2:cf:79:04:51:a6:97:13:75:69:e1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Apr 25 08:55:35 2025 GMT Not After : Apr 28 17:01:35 2025 GMT Subject: CN=57C2C08952CB0A78E720DC5F6D714D9FCE414AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:3b:cf:85:c5:78:d3:2f:75:28:d1:9f:cd: 18:4d:7e:88:7a:a1:af:37:1a:30:12:f8:b1:53:e7: c9:db:78:80:b4:c2:3d:5c:78:d9:69:fe:82:80:f8: db:8b:26:41:89:89:fe:1b:b2:ea:fd:96:f7:ea:d7: d4:47:d1:38:b4:e8:5f:93:0a:de:bc:24:04:63:75: 95:4b:68:73:30:fa:a2:f2:0a:66:07:8d:2c:11:88: b7:8a:57:06:24:4f:a2:52:c9:23:c0:f1:da:7d:d9: 4e:13:6e:98:54:fe:10:01:48:70:8f:d7:2f:e7:85: 5e:b1:45:0c:cf:d3:60:06:52:a4:62:31:eb:ce:c6: 72:36:cb:d6:4a:f2:ca:b0:de:78:a3:4d:0f:48:d9: 5e:89:65:58:6f:5a:0b:8b:58:79:84:81:e8:4c:8f: 6f:8b:aa:21:40:34:6b:1c:5a:c7:ad:d7:bd:57:39: fb:58:2f:ee:84:9b:6e:67:7d:18:04:b6:77:43:5f: 2f:1b:15:41:28:19:e0:6b:bd:9b:09:31:01:b8:d3: 0b:f7:2f:65:e5:47:16:0e:a5:20:60:e8:e4:3e:26: ee:70:99:2d:08:ed:53:43:c4:a9:a5:5b:27:ce:c0: 07:7e:cc:ad:de:65:40:4c:1a:3b:be:9e:db:94:1e: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:C0:89:52:CB:0A:78:E7:20:DC:5F:6D:71:4D:9F:CE:41:4A:E7 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:50:ae:5f:1c:ea:28:1c:a9:9b:ed:11:f9:49:43:fa:fa:bc: e3:8b:1f:79:e5:2c:ea:2d:ad:e5:ac:0a:2e:4f:e4:b4:35:d5: 09:c6:32:55:95:62:e9:b0:e1:41:c1:db:df:3d:84:31:20:42: b1:ae:e7:d1:a1:88:3a:3a:57:8c:ce:8f:e4:17:fd:6d:b3:88: b8:47:50:ae:e1:57:09:67:a3:c0:74:83:10:4e:36:53:d9:58: c6:d7:40:17:85:4c:5b:9c:e4:16:aa:d4:7f:eb:76:c8:f8:5d: aa:d5:2b:d8:10:42:99:19:29:60:93:a8:81:85:62:1a:db:b1: 6a:15:a7:8f:34:b7:7d:9a:2e:a2:90:f7:f4:92:ee:08:6a:07: 2b:0f:ca:41:ed:d1:44:ad:5e:c8:8d:bd:62:b8:8e:68:60:b1: 77:38:72:c3:c4:f7:0f:e0:59:a6:41:83:1f:a0:2e:12:88:3e: e9:d5:f4:c7:01:ea:58:5d:d8:fd:87:92:74:45:40:88:44:85: aa:07:db:ee:f8:3d:c8:2e:21:40:a9:3c:1e:77:c2:7e:0c:3c: ff:1d:d6:7f:2b:81:41:6e:f5:8b:a0:dc:e4:e7:b2:85:68:4b: c2:08:44:2a:0b:5c:de:37:8b:60:21:ce:45:87:f6:ce:04:5b: df:70:cf:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDH1QpWbugzryz3kEUaaXE3Vp4fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTA0MjUwODU1MzVaFw0yNTA0MjgxNzAxMzVaMDMxMTAvBgNV BAMTKDU3QzJDMDg5NTJDQjBBNzhFNzIwREM1RjZENzE0RDlGQ0U0MTRBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYDvPhcV40y91KNGfzRhNfoh6 oa83GjAS+LFT58nbeIC0wj1ceNlp/oKA+NuLJkGJif4bsur9lvfq19RH0Ti06F+T Ct68JARjdZVLaHMw+qLyCmYHjSwRiLeKVwYkT6JSySPA8dp92U4TbphU/hABSHCP 1y/nhV6xRQzP02AGUqRiMevOxnI2y9ZK8sqw3nijTQ9I2V6JZVhvWguLWHmEgehM j2+LqiFANGscWset171XOftYL+6Em25nfRgEtndDXy8bFUEoGeBrvZsJMQG40wv3 L2XlRxYOpSBg6OQ+Ju5wmS0I7VNDxKmlWyfOwAd+zK3eZUBMGju+ntuUHjdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV8LAiVLLCnjnINxfbXFNn85BSucwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9Qrl8c6igcqZvtEflJQ/r6vOOLH3nlLOot reWsCi5P5LQ11QnGMlWVYumw4UHB2989hDEgQrGu59GhiDo6V4zOj+QX/W2ziLhH UK7hVwlno8B0gxBONlPZWMbXQBeFTFuc5Baq1H/rdsj4XarVK9gQQpkZKWCTqIGF YhrbsWoVp480t32aLqKQ9/SS7ghqBysPykHt0UStXsiNvWK4jmhgsXc4csPE9w/g WaZBgx+gLhKIPunV9McB6lhd2P2HknRFQIhEhaoH2+74PcguIUCpPB53wn4MPP8d 1n8rgUFu9Yug3OTnsoVoS8IIRCoLXN43i2AhzkWH9s4EW99wzxY= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:40 2025 by rpki-client on console.sobornost.net